Ubuntu: Security Advisory (USN-5268-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-5207-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-5207-1: Linux kernel (OEM) vulnerabilities

Nadav Amit discovered that the hugetlb implementation in the Linux kernel did not perform TLB flushes under certain conditions. A local attacker could use this to leak or alter data from other processes that use huge pages. CVE-2021-4002 It was discovered that the eBPF implementation in the Linux...

Ubuntu: Security Advisory (USN-5165-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-5165-1: Linux kernel (OEM) vulnerabilities

It was discovered that the NFC subsystem in the Linux kernel contained a use-after-free vulnerability in its NFC Controller Interface NCI implementation. A local attacker could possibly use this to cause a denial of service system crash or execute arbitrary code. CVE-2021-3760 It was discovered...

kernel: Buffer overflow in firewire driver via crafted incoming packets

A buffer overflow vulnerability due to a lack of input filtering of incoming fragmented datagrams was found in the IP-over-1394 driver firewire-net in a fragment handling code in the Linux kernel. The vulnerability exists since firewire supported IPv4, i.e. since version 2.6.31 year 2009 till...

kernel: Buffer overflow in firewire driver via crafted incoming packets

A buffer overflow vulnerability due to a lack of input filtering of incoming fragmented datagrams was found in the IP-over-1394 driver firewire-net in a fragment handling code in the Linux kernel. The vulnerability exists since firewire supported IPv4, i.e. since version 2.6.31 year 2009 till...

Apple MACOS/OSX Arbitrary Code Execution Vulnerability

Apple macOS High Sierra is a suite of Apple's proprietary operating systems developed specifically for Mac computers.IOFireWireFamily is one of the FireWire interface drivers. A security vulnerability exists in the IOFireWireFamily component of Apple macOS High Sierra versions prior to 10.13.4. A...

UBUNTU-CVE-2016-8633

drivers/firewire/net.c in the Linux kernel before 4.8.7, in certain unusual hardware configurations, allows remote attackers to execute arbitrary code via crafted fragmented packets...

CVE-2015-3707

The FireWire driver in IOFireWireFamily in Apple OS X before 10.10.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of service NULL pointer dereference via a crafted app...

CVE-2015-3707

The CVE concerns the FireWire driver IOFireWireFamily in Apple OS X, with affected range OS X Yosemite up to 10.10.3. Description: IOFireWireFamily contains multiple null pointer dereference issues that can allow a crafted app to execute arbitrary code in a privileged context or cause a denial of...

CVE-2015-3707: Undefined Security Weakness

The FireWire driver in IOFireWireFamily in Apple OS X before 10.10.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of service NULL pointer dereference via a crafted app...

PT-2015-6305

Name of the Vulnerable Software and Affected Versions Apple OS X versions prior to 10.10.4 Description The issue allows attackers to execute arbitrary code in a privileged context or cause a denial of service via a crafted app, specifically due to a problem in the FireWire driver in...

Apple MAC OS X FireWire Driver Null Pointer Reference Vulnerability

Apple Mac OS X is a commercial operating system. Apple Mac OS X handles a null pointer reference vulnerability in the FireWire driver, which allows attackers to exploit the vulnerability to run malicious applications and execute arbitrary code...

CVE-2002-1573: Undefined Security Weakness

Unspecified vulnerability in the pcilynx ieee1394 firewire driver pcilynx.c in Linux kernel before 2.4.20 has unknown impact and attack vectors, related to "wrap handling."...

CVE-2004-0658: Undefined Security Weakness

Integer overflow in the hpsballocpacket function incorrectly reported as allochpsbpacket in IEEE 1394 Firewire driver 2.4 and 2.6 allows local users to cause a denial of service crash and possibly execute arbitrary code via the functions 1 raw1394write, 2 stateconnected, 3 handleremoterequest, or...